An opinionated test suite focused on generally applicable web application security rules